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M Marsvi ewer 2008 

Marsviewer 2008 is designed for qual- 
ity control, browsing, and operational 
and science analysis of images and de- 
rived image products returned by space- 
craft. This program allows all derived 
products (reduced data records, or 
RDRs) associated with each original 
image (experiment data record, or 
EDR) to be viewed in various ways, in- 
cluding in stereo, depending on thetype 
of image. 

The program features a pluggable in- 
terface called a "file finder." This en- 
capsulates knowledge of a specific mis- 
sion's filename and directory 
conventions, hiding the complexity be- 
hind each mission from the user, and al- 
lowing new missions to be added easily. 
Within a mission, different directory 
conventions can also be supported. This 
file-finder interface presentsa similar in- 
terface to the user for all these missions 
and directory structures. All EDRsfound 
for a given Sol are displayed in a list (op- 
tionally with thumbnail images) for the 
user to pick from. 

Once an image is picked, a primary 
(vertical) tab pane allows the user to se- 
lect the left or right image, left or right 
thumbnail, or stereo views. A secondary 
(horizontal) tab paneallowsthe EDR, or 
any of its RDRs, to be viewed. Most RDRs 
may be viewed independently, or as col- 
ored overlays on a background image. 
Each of the 41 RDR types has a display 
method appropriate for that type, and 
most have display parameters that can 
be adjusted. 

The program understands two differ- 
ent image geometries (raw and lin- 
earized), and can show the actual pixel 
values under the cursor for every EDR 
and RDR matching the geometry type at 
once. Various display manipulations, 
such as zoom, data range, contrast en- 
hancement, interval selection, and con- 
tour controls are available. Metadata 
(image labels) may be displayed and 
searched as well. The stereo display 
shows both left and right images simulta- 
neously. It works either in anaglyph 
mode (red/ blue glasses), or by using 
dedicated display hardware. 

This innovation also covers the appli- 
cations "jadeviewer" and "jade_over- 
layer,” which are closely related deriva- 
tives from Marsviewer. The "jadeviewer" 


application reuses the image display and 
visualization portions of Marsviewer 
without the file finder. The user directly 
specifies filenames and RDR type, and 
can then view the product as with 
Marsviewer. 

This work was done by Nicholas T. Toole 
and RobertG. Deen of Caltech forNASA'sJet 
Propulsion Laboratory. For more in formation, 
con tact i a offi ce@jpl .nasa.gov. 

The software used in this innovation is 
available for commercial licensing. Please con- 
tact Daniel Broderick of the California Insti- 
tute of Technology at danidb@caltech.edu. 
Refer to N PO-46698. 


fs Mission Services Evolution 
Center Message Bus 

The Goddard Mission Services Evolu- 
tion Center (GMSEC) Message Bus is a 
robust, lightweight, fault-tolerant mid- 
dleware implementation that supports 
all messaging capabilities of the GMSEC 
API, including publish/ subscribe and 
request/ reply. The Message Bus enables 
NASA to provide an open-source mid- 
dleware solution, for no additional cost, 
that is self-configuring, easy to install, 
and can be used for the development of 
GMSEC-compliant components. Some 
professional capabilities provided by this 
software include failover and fault toler- 
ance, good performance, compression, 
debugging, and wide platform support. 

This architecture is a distributed 
software system that routes messages 
based on message subject names and 
knowledge of the locations in the net- 
work of the interested software compo- 
nents. Functional software components 
register with the message bus, so that a 
location directory can be maintained. 
The functional applications then send 
messages onto the bus with an indica- 
tion of the message type/ subject/ etc. 
Other applications that want to receive 
data register with the message bus and 
indicate what message types/ subjects 
they want to receive. The message bus 
maintains a routing table where routes 
publish messages to the applications 
that have requested them. One mes- 
sage may be delivered to many differ- 
ent applications. Use of the message 
buseliminatesthe need for each appli- 
cation to create separate communica- 
tions paths with each application to 
which it interfaces. 


ThenatureoftheGMSEC MessageBus 
enables any project or user to quickly 
take the initial steps for creating or con- 
necting GMSEC-compliant components, 
and for developing small systems without 
high license fees and learning curves. 
This software uses middleware to facili- 
tate cross application or component com- 
munication on a software bus. 

T his work was donebyA rturo M ayorga and 
John 0. Bristow of Goddard Space Flight Cen- 
ter and M ike Butschky of I n ter face and Control 
Systems. Further information is contained in 
a TSP (see page 1). GSC-15575-1 


m Major C onstituents Analysis 
for the Vehicle Cabin At- 
mosphere Monitor 

Vehicle Cabin Atmosphere Monitor 
( VCAM ) can provide a means for mon- 
itoring the air within enclosed environ- 
ments such as the International Space 
Station, the Crew Exploration Vehicle 
(CEV), a Lunar habitat, or another ve- 
hicle traveling to Mars. Its miniature 
pre-concentrator, gas chromatograph 
(GC), and mass spectrometer can pro- 
vide unbiased detection of a large num- 
ber of organic species. VCAM 's software 
can identify whether the chemicals are 
on a targeted list of hazardous com- 
pounds and their concentration. Its 
performance and reliability on orbit, 
along with the ground team's assess- 
ment of its raw data and analysis results, 
will validate its technology for future 
use and development. 

The software processes a sum total 
spectra (counts vs. mass channel) with 
the intention of computing abundance 
ratios for N 2 , O 2 , CO 2 , Ar 2 , and H 2 O . A 
brute-force powerset expansion com- 
pares a library of expected mass lines 
with those found within the data. Least 
squares error iscombined with a penalty 
term for using small peaks. This permits 
calibration even in the presence of un- 
expected/unknown system contamina- 
tion or unknown/ novel ratios of atmos- 
pheric constituents. 

Automated, reliable mass calibra- 
tion is a substantial improvement be- 
yond other comparable systems. A 
method of compensation for variable 
response component spectra has been 
utilized via a weighted sum based on 
the central peak for each expected 
component. 
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It is fu I ly autonomous, non-GU l-based, 
self-calibrating, and compliant with the 
VX WORKS flight software system. 

T his work was done by L ukas M andrake 
Benjamin J. Bornsten, Stojan Madzunkov, 
and John A. M acaskill of Caltech for NASA's 
Jet Propulsion Laboratory. For more informa- 
tion, contact i a offi ce@jpl.nasa.gov. 

The software used in this innovation is 
available for commercial licensing. Please con- 
tact Daniel Broderick of the California Insti- 
tute of Technology at danielb@caltech.edu. 
Refer to NPO-46956. 


<H Astronaut H ealth Partici- 
pant Summary Application 

The Longitudinal Study of Astronaut 
Health (LSAH) Participant Summary 
software captures data based on a cus- 
tom information model designed to 
gather all relevant, discrete medical 
events for its study participants. This 
software provides a summarized view of 
the study participant's entire medical 
record. The manual collapsing of all the 
data in a participant's medical record 
into a summarized form eliminates re- 
dundancy, and allows for the capture of 
entire medical events. The coding tool 
could be incorporated into commercial 
electronic medical record software for 
use in areas like public health surveil- 
lance, hospital systems, clinics, and med- 
ical research programs. 

The software also enables structured 
coding that enforces a custom set of 
rules, as well as captures the context of 
thecoded term.Theterminologyused is 
SNOMED CT, which is a massive termi- 
nology consisting of over 366,000 con- 
cepts with unique meanings and formal, 
logic-based definitions that are organ- 
ized into 18 hierarchies. In addition, it 
containsmorethan 993,000 descriptions 
or synonyms for flexibility in expressing 
clinical concepts. SNOMED CT is also a 
compositional terminology, so multiple 
concepts can be grouped together to 
create an expression that has a totally 
different logical definition. By using 
some custom composition rules along 
with the context within the Participant 
Summary, a user can greatly reduce the 
number of candidate concepts, which 
not only improves productivity, it en- 
sures that only legal SNOMED expres- 
sions can be created. 

LSAH defines the line between the 
terminology and the information 
model. It takes a middle road between 
putting all the structure in a complex 
coded term and putting all the structure 
in numerous database fields. 


This work was done by Kathy Johnson- 
Throop of Johnson SpaceCenter; Ralph Krog 
of National Space Biomedical Research Insti- 
tute; Deborah Eudy and Diane Parisian of 
EASI; Seth Rodriguez and John Rogers of 
Barrios Technology; and M ary Wear, Robert 
Volpe and Gina Trevino of Wyie Laborato- 
ries. Further information is contained in a 
TSP (see page 1).M SC-24172-1 


0 Adaption of the AMDIS 
Method to Flight Status on 
theVCAM Instrument 

Software has been developed to func- 
tion onboard the International Space 
Station (ISS) to help safeguard human 
health by detecting compounds of con- 
cern in the cabin atmosphere, both in 
identity and concentration. This soft- 
ware calibrates and processes a stan- 
dard 2D dataset (mass spectrum versus 
time) output from a gas chro- 
matogram/ mass spectrometer by iden- 
tifying temporal events, including the 
possibility for near simultaneous event 
overlap, reducing the mass spectra for 
each event and comparing to an arbi- 
trary library of known compounds. The 
level of autonomy, adjustment of pa- 
rametersfor the VCAM devices' specific 
data characteristics, and adaptive mass 
resolution to ease requirement of preci- 
sion mass calibration are three unique 
features of this design. The estimation 
of concentration is also a significant ad- 
dition to the standard AMDIS (NIST) 
implementation. Solution filtration 
based on elution time, and an arbitra- 
tion algorithm for similar matches, pro- 
vide the user with a more succinct, sin- 
gle-valued estimate in comparison to 
algorithmsdesigned to merely augment 
expert hand analysis. 

T his work was done by L ukas M andrake, 
Benjamin J. Bornsten, Seungwon Lee and 
Brian D. Bue of Caltech for NASA's Jet 
Propulsion Laboratory. For more in formation, 
con tact i a offi ce@jpl .nasa.gov. 

The software used in this innovation is 
available for commercial licensing. Please con- 
tact Daniel Broderick of the California Insti- 
tute of Technology at danielb@caltech.edu. 
Refer to NP046563. 


0 Natural Language Interface 
for Safety Certification of 
Safety-Critical Software 

Model-based design and automated 
code generation are being used increas- 
ingly at NASA. The trend is to move be- 
yond simulation and prototyping to 
actual flight code, particularly in the 


guidance, navigation, and control do- 
main. H owever, there are substantial ob- 
stacles to more widespread adoption of 
code generators in such safety-critical 
domains. Since code generators are typ- 
ically not qualified, there is no guaran- 
tee that their output is correct, and con- 
sequently the generated code still needs 
to be fully tested and certified. 

The AutoCert generator plug-in sup- 
ports the certification of automatically 
generated code by formally verifying 
that the generated code is free of differ- 
ent safety violations, by constructing an 
independently verifiable certificate, and 
by explaining its analysis in a textual 
form suitable for code reviews. This en- 
ables missions to obtain assurance about 
the safety and reliability of the code 
without excessive manual effort. The key 
technical idea isto exploit the idiomatic 
nature of auto-generated code in order 
to automatically infer logical annota- 
tions that describe properties of the 
code. These allow the automatic formal 
verification of the safety properties with- 
out requiring access to the internals of 
the code generator. The approach is 
therefore independent of the particular 
generator used. The use of a combined 
generation/ analysis tool can allow sys- 
tem engineers to concentrate on the 
modeling and design, rather than worry- 
ing about low-level software details. By 
providing tracing between code and ver- 
ification artifacts, and customizable 
safety reports, the tool supports both 
certification and debugging. Although 
integrated with the code generator, Au- 
toCert is functionally independent in 
the sense that it does not rely on the cor- 
rectness of any generator components. 
The tool has two main benefits: (1) it 
helps catch bugs in autocoders, and (2) 
it helps with the certification processfor 
the autogenerated code, thus mitigating 
the risk of using COTS autocoders that 
lack a trusted heritage. 

The AutoCert technology also has a 
number of advantages over other ap- 
proaches to formal verification. It can 
handle code with arbitrary loops, and 
can handle code generated from both 
continuous and discrete models. M ore- 
over, the certification system based on 
annotation inference is more flexible 
and extensible than decentralized ar- 
chitectures where certification infor- 
mation is distributed throughout the 
code generator. Identifying the pat- 
terns that are used to infer the annota- 
tions is an iterative process, but by al- 
lowing tracing between VCs 
(verification conditions) and state- 
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